Microsoft-IIS 10.0
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60da4dc07661cb872b9b429447ab01e5038335d7b9
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /api/Application GET /api/AzureB2CUser GET /api/AzureB2CUsers GET /api/Business GET /api/BusinessAddress GET /api/BusinessContactUsers GET /api/BusinessUserAdmin GET /api/BusinessUserServiceAccess GET /api/Businesses GET /api/CrmUser GET /api/ServiceAccess GET /api/ServiceAddress GET /api/ServiceSubscription GET /api/Status GET /api/User GET /api/UserAddress GET /api/Users POST /api/BusinessUserAccess
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60da4dc07661cb872b9b429447ab01e5038335d7b9
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /api/Application GET /api/AzureB2CUser GET /api/AzureB2CUsers GET /api/Business GET /api/BusinessAddress GET /api/BusinessContactUsers GET /api/BusinessUserAdmin GET /api/BusinessUserServiceAccess GET /api/Businesses GET /api/CrmUser GET /api/ServiceAccess GET /api/ServiceAddress GET /api/ServiceSubscription GET /api/Status GET /api/User GET /api/UserAddress GET /api/Users POST /api/BusinessUserAccess
Open service 52.178.89.129:443 · identityservice-admin.cncdev.net
2026-01-23 12:56
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 12:57:14 GMT Server: Microsoft-IIS/10.0 Set-Cookie: ARRAffinity=5ec6bfa9889a94e0c1ba08b7576ba5137660353bb2d93a4e2b398b14ca794c66;Path=/;HttpOnly;Secure;Domain=identityservice-admin.cncdev.net Set-Cookie: ARRAffinitySameSite=5ec6bfa9889a94e0c1ba08b7576ba5137660353bb2d93a4e2b398b14ca794c66;Path=/;HttpOnly;SameSite=None;Secure;Domain=identityservice-admin.cncdev.net Request-Context: appId=cid-v1:556f60d1-e7e5-4899-97cd-054de59a678e X-Powered-By: ASP.NET
Open service 52.178.89.129:443 · identityservice-admin.cncdev.net
2026-01-10 08:56
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 08:57:54 GMT Server: Microsoft-IIS/10.0 Set-Cookie: ARRAffinity=5ec6bfa9889a94e0c1ba08b7576ba5137660353bb2d93a4e2b398b14ca794c66;Path=/;HttpOnly;Secure;Domain=identityservice-admin.cncdev.net Set-Cookie: ARRAffinitySameSite=5ec6bfa9889a94e0c1ba08b7576ba5137660353bb2d93a4e2b398b14ca794c66;Path=/;HttpOnly;SameSite=None;Secure;Domain=identityservice-admin.cncdev.net Request-Context: appId=cid-v1:556f60d1-e7e5-4899-97cd-054de59a678e X-Powered-By: ASP.NET
Open service 52.178.89.129:80 · identityservice-admin.cncdev.net
2026-01-10 08:56
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 08:57:53 GMT Server: Microsoft-IIS/10.0 Set-Cookie: ARRAffinity=5ec6bfa9889a94e0c1ba08b7576ba5137660353bb2d93a4e2b398b14ca794c66;Path=/;HttpOnly;Domain=identityservice-admin.cncdev.net Request-Context: appId=cid-v1:556f60d1-e7e5-4899-97cd-054de59a678e X-Powered-By: ASP.NET